San Carlo San Carlo Logo +441618398865 Customer Service Feedback General Enquiries Press Enquiries Recruitment Harnbury Holdings Ltd, 1s Floor Acresfield, 8-10 Exchange Street Manchester Greater Manchester M2 7HA United Kingdom 53.4827883 -2.2479617


San Carlo Privacy Policy

At Harnbury Holdings Ltd (company number: 02702491) of 1st Floor, Acresfield, 8-10 Exchange Street, Manchester, M2 7HA, t/a San Carlo (San Carlo), we take your privacy seriously. The following document outlines how we collect, use and protect your personal data across all of our San Carlo websites (including,,,,,,, and and digital platforms (Websites) and also in our restaurants and when you contact us by phone, email, post or social media.


What personal data is being collected?

Whilst you are using our Websites we may ask you for some personal data, such as your name, email address, address and phone number, demographic information such as your age, gender, location, restaurant preferences and interests when you take part in any of our customer surveys, offers, newsletters and competitions or when you make an online booking or register to join My San Carlo. We may also collect your IP address in order to serve you location specific content and tailor our Websites to you. Where you make payment in any of our restaurants using a credit or debit card, we will collect and hold details of such payment card.


Who is collecting the personal data?

All personal data collected when using our Websites will be collected by Harnbury Holdings Ltd. The personal data we collect from you while you are in our restaurants will be collected by the operator of such restaurant. If you are dining in one of our restaurants which is located in a third party store (for example, Ciccheti in House of Fraser or any of our restaurants located in Selfridges) your personal data will be collected by Harnbury Ltd (company number: 01386303). If you are dining in one of our Signor Sassi restaurants, your data will be collected by Signor Sassi Limited (company number: 04018989). Otherwise, the collection will be carried out by Harnbury Holdings Ltd.


How is the personal data collected?

Personal data is collected across the Websites as you use the relevant sites. Personal data collection takes place during the following actions – making dining reservations, entering competitions, signing up to the San Carlo Newsletter or signing up to the My San Carlo members area. We may also collect your personal data for the purpose of processing payments in our restaurants, when dealing with any customer service queries and if you complete one of our in-store cards to sign up to receive our latest news and offers.

How is the personal data stored / secured?

Your personal data and privacy is of the utmost priority to us. We are committed to ensuring that any personal data/information gathered is securely stored. To ensure no personal data is collected or disclosed against your will or any unauthorised access is gained, we have implemented the necessary physical, electronic and managerial procedures to safeguard and secure the personal data we collect from you. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Websites; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access. The length of time for which we will securely store any personal data you share with us will depend on the type of personal data and the purpose for which it is being held. The following are indicative periods for which we will retain your personal data:

  • where we are holding your personal data as a member of My San Carlo, for so long as you continue to be a member of such club.
  • where we are holding your personal data for the purpose of sharing our newsletter with you, for so long as you consent to receive such communications.
  • where we are holding your personal data to enable us to carry out a reservation, until such reservation has been completed (i.e. the date on which you dine with us and for such period thereafter as is necessary for our internal administrative purposes), unless you have chosen to join My San Carlo (in which case the personal data will be held for so long as you continue to be a member of such club).
  • where we are holding your personal data for payment processing reasons, 3 months following the collection of such personal data.
  • where we are holding your personal data for customer service reasons, for such period as is necessary to ensure that your query has been dealt with fully and properly in accordance with our usual standards.


Why do we collect this data?

We would like to collect your personal data in order to provide you with the best possible experience and service and to tailor our communications to you. We will need your name and email address in order to create your My San Carlo account. If you choose to provide us with your age, gender, location and any other demographic or preference information, this personal data will be subject to automated processing to create a profile of you and your preferences which will then be used to seek to tailor our communications to you. If you are not comfortable with this automated processing, please contact us using the details below to let us know. By allowing us to collect your IP address and cookies, your experience on our Websites will be maximised as our sites rely on some of the personal data you supply to function at their optimum level. If you choose to join our My San Carlo club, your personal data will be used to communicate relevant and up to date information about our restaurants (including, San Carlo, Cicchetti, Fumo, Signor Sassi, Bottega, Gran Cafe, Fiorentina and Flying Pizza) to you, which will include: –   Specific restaurant offerings –   New menus –   Competitions –   Events –   New Restaurants –   Location specific news –   Newsletters and promotional emails which we feel will be of interest to you –   Other related information The personal data we collect whilst you are in our restaurants and as part of our provision of customer services will be used for the purpose of providing our services to you. This personal data will not be used for any other purpose.

What is our lawful basis for our use of your personal data?

Where we are using your personal data for direct marketing purposes (including membership of My San Carlo), our lawful basis for such processing will be your consent. Where we are using your personal data to make a booking/reservation, process a payment or provide our customer services to you, our lawful basis for such processing will be performance of a contract.


You may withdraw your consent at any time

As noted above, some of our processing is subject to the lawful basis of “consent”. You are able to withdraw your consent to such processing at any time by either contacting us using the details set out below, following the “opt-out” link in any marketing communications we send to you or (where you are a member of My San Carlo) adjusting your preferences in our members area. Please note that if you withdraw your consent to us using your name and email address then you will no longer be able to benefit from our My San Carlo membership and your account will be deleted.


Sharing your data

We do not sell your personal information to any 3rd party organisations. We do, however, share your data with certain third parties in order to provide our highest quality service to you, this includes: our marketing agents, our email mailing list provider, our IT service provider, our payment processor and our online booking provider. In addition, we may make the following disclosures of your personal data to third parties where required:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or to protect the rights, property, or safety of Harnbury Holdings Ltd (or any company within our group), our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.


International Transfers

We do not transfer your personal data outside of the European Economic Area.


Checking your details

If you wish to amend or verify the details you have submitted to us you may do so by contacting us via the email address or address given below. Our security procedures mean that we will request proof of identity before we reveal information.


Deleting your data

If at any point you no longer want to receive communications from Harnbury Holdings Limited and you wish to permanently delete your personal data records we will, subject to not requiring such personal data to be retained for any legal or other valid reason, facilitate this without undue delay upon receiving your communication. This action can be instigated at any time by the following methods (please note that if you do make such a request by phone, we will also require confirmation of this in writing for our records): Phone – 0161 839 8865 Email – Post – Harnbury Holdings Ltd 1st Floor Acresfield, 8-10 Exchange Street Manchester, M2 7HA


Your rights in respect of your personal data

In addition to your right for your personal data to be deleted (as set out above) you have various other rights in respect of your personal data, as follows:

  • a right of access to a copy of the personal data we hold about you;
  • a right to object to processing that is likely to cause or is causing damage or distress to you;
  • a right to prevent processing for direct marketing;
  • a right to object to decisions being taken by automated means;
  • a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
  • a right to claim compensation for damages caused by a breach of the Act.

If you wish to exercise any of these rights, please contact us at or Harnbury Holdings Ltd, 1st Floor Acresfield, 8-10 Exchange Street, Manchester, M2 7HA or by phone to 0161 839 8865.


We may make changes to this policy

Any changes we make to our privacy policy in the future will be posted on the Websites and notified to you the first time you access the Websites following such change.


Your right to make a complaint in respect of our use of your personal data

You have the right to complain to your relevant supervisory authority in respect of our use of your personal data. If you are a UK resident, your complaint would normally be addressed to the Information Commissioner’s Office. Please contact us before you escalate your complaint.


Contacting us

We are always pleased to hear from our customers. We are always grateful for any time you spend providing us with the knowledge we need to ensure our customers are completely satisfied – we want to work with you and want you to recommend us to your friends, family and associates. If you have any questions or feedback about this statement, or if you would like us to stop processing your personal data, please do not hesitate to contact us and will be delighted to answer any questions you may have. You can either contact us by clicking here. Calling 0161 834 6226 Or, writing to us at: San Carlo Harnbury Holdings Ltd, 1st Floor, Acresfield, 8-10 Exchange Street Manchester, M2 7HA Our data protection officer is Joanna Simpson and she can be contacted in writing at or by phone on 0161 834 6226.


Privacy Notice – Test & Trace

To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.

By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.

As a customer of Harnbury Holdings Ltd (company number 02702491) trading as San Carlo (“San Carlo”) you will be asked to provide some basic information and contact details. The following information will be collected:

• the names of all customers

• a contact phone number for each customer

• date of visit and arrival time and departure time

As the data controllers for the collection of your personal data San Carlo will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.

The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.

NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.

For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).

We may require you to pre-book reservations or to complete a form on arrival.

Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.

However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.

Your information will always be stored and used in compliance with the relevant data protection legislation. For further information on how we collect and use your personal data please see our Privacy Policy which is available on our website at

Last updated: 15 April 2021


San Carlo Cookies Policy

As is common practice with almost all professional websites our Websites use cookies, which are tiny files that are downloaded to your computer, to improve your experience on our Websites. This policy describes what information they gather, how we use such information and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or ‘break’ certain elements of our Websites’ functionality. For more general information on cookies see

How We Use Cookies

We use cookies for a variety of reasons which are detailed below. Unfortunately in most cases there are currently no industry standard options for disabling cookies without completely disabling the functionality and features they add to our Websites. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.


Disabling Cookies

You will be given the opportunity to opt in/opt out of certain cookies (including those that collect personal data about you) we use but as mentioned above opting out could disable the functionality and features they add to our Websites. Once you have agreed to opt in we will always provide you with the opportunity to opt out at any time. You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of our Websites and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of our Websites. Therefore it is recommended that you do not disable cookies.


The Cookies We Set

Our Websites offer newsletter, email subscription services and My San Carlo members area and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users/members. When you submit personal data to us through a form such as those found on contact pages, competitions, bookings or comment forms cookies may be set to remember your user details for future correspondence or relevant content sharing.


Third Party Cookies

We also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site. Our Websites use Google Analytics which is one of the most widespread and trusted analytics solutions on the web for helping us to understand how you use our Websites and ways that we can improve your experience. These cookies will track things such as how long you spend on our Websites and the pages that you visit so we can continue to produce engaging content and maximise the San Carlo experience For more information on Google Analytics cookies, see the official Google Analytics page. Third party analytics are used to track and measure usage of our Websites so that we can continue to produce engaging content. These cookies may track things such as how long you spend on our Websites or pages you visit which helps us to understand how we can improve our Websites for you. You may also encounter cookies related to the WordPress Content Management System, which is essential for correct functionality. We would also capture your IP address upon completion of a contact form on the site (competition/booking) as well as every time you access our Websites. In the latter case, this would be in a non-personally identifiable way.


Cookie List

Below is a list of the cookies used on the San Carlo site:

_fbp3 monthsThis cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website.
_ga2 yearsThe _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gat_UA-23735483-11 minuteThis is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
_gid1 dayInstalled by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
_hjAbsoluteSessionInProgress30 minutesNo description available.
_hjFirstSeen30 minutesThis is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.
_hjid1 yearThis is a Hotjar cookie that is set when the customer first lands on a page using the Hotjar script.
_hjIncludedInPageviewSample2 minutesNo description available.
_hjIncludedInSessionSample2 minutesNo description available.
AnalyticsSyncHistory1 monthNo description
bcookie2 yearsLinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID.
bscookie2 yearsThis cookie is a browser ID cookie set by Linked share Buttons and ad tags.
cookielawinfo-checkbox-advertisement1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category .
cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
fr3 monthsFacebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin.
langsessionThis cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.
li_gc2 yearsNo description
lidc1 dayLinkedIn sets the lidc cookie to facilitate data center selection.
PHPSESSIDsessionThis cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.
UserMatchHistory1 monthLinkedin - Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.


Local Storage

Our Websites also use Javascript Local Storage. This doesn’t store personal data just your viewing preferences.


More Information

If you are looking for more information, please contact us through one of the following: Phone – 0161 839 8865 Email – Post – Harnbury Holdings Ltd 1st Floor Acresfield, 8-10 Exchange Street Manchester, M2 7HA


San Carlo Gender Pay Gap Policy

To view the San Carlo Pay Gap Policy statement, please click here 


San Carlo Modern Slavery Policy statement

To view the San Carlo Modern Slavery Policy statement, please click here


Join My San Carlo Newsletter

Want more from San Carlo? To thank you and show our appreciation for your loyalty, San Carlo Group Restaurants has launched My San Carlo. Benefits include being the first to hear about special events and new dishes, as well as access to news, recipes, competitions and the low down on how to order secret menu items! What are you waiting for? Get started and Join the My San Carlo newsletter today..